escape chars in javascript args